home

www.hostgiftcontent.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
hostgiftcontent.com

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAX.Installer (M), PUP.InstallCore.RE11 (M)
100.00%

The domain www.hostgiftcontent.com has been seen to resolve to the following 11 IP addresses.

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 17, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 17, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 17, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 17, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 17, 2016

File downloads found at URLs served by www.hostgiftcontent.com.

0 / 68
http://www.hostgiftcontent.com/WVl6OTRQV2RwUzNkWE1EZEJNMFp2TkZWaE9UZHFZVFJ1Y0daQ1ZrbDBKVEpHTUZsaGRFWjJOMnAwUWt4ck9FMDJXU1V6UkNaalBVNVlTRGhqY205eGJtdHpaR1UxYlhGVWVGRjNWWFF5TWxoUU9FY3lVR2t4Tm1KR1lpVXlSaVV5Um5oeFJtaE5URzEwWW05V2VVSjNZVEJyVkdOb1kxTXlWa05yY2t4R2R6VTBaRzgxUjBsaVEyOGxNa0oxUmxaT2NtRk1KVEpHTVRkTVRGSllVazlIWVVkVFNqQlRjV1JZTW1KSVMwbFZaR2hpZDFSVGRsRnNZVXRETWs5NkpUSkNWU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbkpsY3k1b2RXWm1kRzl6TG1OdmJTVXlSbVpwY21WbWIzZ2xNa1pHYVhKbFptOTRYMU5sZEhWd1h6SXhMakJmWm5JdVpYaGw=  (25535-671783-mozilla-firefox.exe)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=i3LGYh8osk2TKcWpav7M6vPuR4NkagR2l1RsdmWiSHE=&c=u7YG2GvJmejyf2S6GVvSsMfE8KzaGqDpAYqTpUjiCjM v7juIpqTB3Thymq9pstA3QYMuJBMBrPh4M3Fd52JSGwx9QiXX7Y61WmPv7Y3DsIqQCKzQO4tE4j62yOBh1jR7/x1IqizZoMt4W2 2J0Mvl2n dpIi5OnNOQyOo3uoMaa ovDuMXNUCrZaHqD09rU&e=0&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (f3df7a79dc72a7426ad45e8d1d17d353)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=EoBDl3pXTqCgr1LYSC37sKW7w5N SkGOD/9SDEkwmwY=&c=1dYAeJ4S0P2OAKvk7pa8bysQwAEbJw5Ukk4 X72IV/xHG1VkMmtiiP5424SfUerdpz4h uxqqq5qqNz56bzsvwHEkYOq7zqJ69xnWtKl4Dtky2KVS145Ngo7T Dxd81G&fallback_url=http://res.mshist.com/.../HayDay.exe  (8e6898f76b164f45160146f19303ed21)

1 / 68      (PUP)
http://www.hostgiftcontent.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  (install_flashplayer11x32_mssd_aih_other.exe)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=wICWapsrEQzvyCR2PvhZ p8 4djZ4N/lU2ONRRquuiM=&c=7xQQ 5c9EPKoG2o1XrO21lUGioH8Bn/NEw9dX4uO5VK7b4zpE84tctbYkX6ysqvMS7wgL2NsOD8nrJSHVsqlQAieeBV9c1//BP6IUmlCdEKBcdbW0sAkiSD294afr2t1&fallback_url=http://res.mshist.com/.../LeagueofLegends_EUW_Installer_9_15_2014.exe  (96a93d17706ce124e96ab8ed0faa70a9)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=i6SaAPr5PhRV4bXjOj3W0Xvq Lt9 R jNuRkzuLxN9s=&c=DizELp9YewLNrXo74PuNjOqCjUMBQK41B3xfMYX/A0mcXRinQUqnktxYKH50tShYH2jJQ3Vpjn85UKdJeXifVN6bX9t6tZHgBGRWO48o2SiQqVN3pi1gryIRnc 0pon2&fallback_url=http://res.prograbay.com/.../Minecraft_1-5-2.exe  (icreinstall_minecraft_1-5-2.exe)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=whZtJpNQT3M5VsL YWl4WnR/0Lsram27kh2tK7RjGoU=&c=ygGwz eWgP2oPtqsIVxWlXU5medKbcbaagWsdTrtEa7t1ph5kYz3a/0ZCmjdiQsxZ6PTtVfBApSlt5m3UP39eQNjTBy1sqZnpuidyJbxxUOr6X9tNFwXN1HGi4wzdpr2&fallback_url=http://res.mshist.com/.../Snapchat.exe  (c7e70c641bc6fe4b28b9af2d81eaf1e6)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=RTYCDfVBgibva4C1e zXLnvkRlqYGAsffQfxvX Nqro=&c=bLk4LqdGCNdFwBEuOLwoDE1AQvdTjcQj2gJV43QZgYsDqxO7LdiBV1ggbBj 0B3atoT3uoO06YLa9/RgePf/Hf5huTe5pgL/1UO5eys5Febk/Jcg5909yt1t XEs3UOH&fallback_url=http://res.prograbay.com/.../wordview_fr-fr.exe  (dd7ecfe9bed4e619157bbf76c606c9d3)

1 / 68      (PUP)
http://www.hostgiftcontent.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  (icreinstall_apache_openoffice_incubating_3.4.1_win_x86_install_fr.exe)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=dRH7sjufDoUByIAJ6RsC6JpufSGlEh8besGOMkQHHGQ=&c=2oV3eJaK1pOcsZL2S6BgJkCLLwdulfQeDvbQV0n4PLrFa/9gQBwqVrdlWkWYSQh4IlqKw13tzoJdqB0fM5X dEsrVK7PrX0TEgBwtdRxvmxy8JBlAVWqqhI0xbT6yTrN&fallback_url=http://res.mshist.com/.../ClashRoyale.exe  (9478adcd2900d24db5e5979a4b620beb)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=7G14EUXodNYsqTmVVosC rGEOke73Knz9bN/mHJe5rg=&c=cScV21UH9l39wJ0/0qThoicFwrOPVKzXKlXC0FB9A61BFiPNAHdX9LVRRIQafwHnGciaQi6k3Y5cq7CJNH2xnatEaG1DOulcZ9zh9CkhQJJyxrtvGfZ5UUCuUeSLwxaC&fallback_url=http://res.prograbay.com/.../ChromeSetup_fr.exe  (81618c039e67f984bb9f62bf7ca751ab)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=joC33evdrGp4AfBC3IhNxIg6oGpwt yS3SXNchZbF30=&c=g3nj7SQVu0U4cJbj83qBPKGyLUL7rXSlTeDvqxPboQC9fdyidt/7QtFrRl46 shyatiy/WYXYkRFQoA7oAi/HZZMQL1lc IFCWQfYqaeU6Px3TjReaLuTiBEzHJbpzmH&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (ee4a1464b371a2149a80e7edde4e3e10)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=EVg36YzeF2GJTBwi7DNLmUJwOWwWNV6Zlg9seDDtuqw=&c=ZNR6vaFuCJU0bqP93YODChcSFE6Ho6y/ives2G78i 9mr5yjajFXwVIBRoLUkfKxR5Yq5gBfhxqxhmcMFc52Gj/mWbwf2NbB57Afeb7ssLzBd3mAnLKYiS1WinvHPwzl&fallback_url=http://res.prograbay.com/.../ChromeSetup_fr.exe  (81618c039e67f984bb9f62bf7ca751ab)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=RKLtQeExX BF5Ymh4K3oJ5KGzwCrSXWL5ghFuu8jltY=&c=a59Z1oRNpnbA8hioHLPrzwxz4UrQFktthHFJUe8XekfQAscOktKcBJJyljNjaOeYZeSRvHGT4vQ1Gq1k8EG 5t6kvtdP9f19ME xq1GiAJUlSNx8qknUeM7TXnFXKpvf&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_c.exe)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=sCWI IVof3daCCpVOZifIsO7iR06PyEVV5rGd3cceDQ=&c=pj435QDDKEfdwUFi6NfmmaPV46jGf4BIx4Ky1lq4dkRvTunJVgjt9RQgTDHlbnYzXfoq cPhl4Ka0z4tP5iwuIIirHy4O6H2yYoyZu21Ujm2O0QH FO/aDwVUlzTQdtrXbCvmaZ 6XTob05jhTJqSbwwHeAUoqE5nmFbFAzq27c=&e=0&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (a84a9469a43348eaf1275c8bac1dc922)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x= oOTH Frow8Od0uz9nn3p/0Jje8BbNWHBugBLEtFIFI=&c=lrIPBbB4oh4esaGCE6L2IhvIsb4gJuCU22hcqmt XwK0l7 GeBiFCs80WPaPH SEhAJfE98F/bLDfqRwBp/T4/wS5pgoe4cm9sIsmmtLKqkY9SuauxSympEu2lbrcO P537 OFY7OhQiJ5CIgrYIVwbZgHzJbzs/7UAT4bgoqvc=&e=0&downloadAs=36b65e49f3af992f3c6ab91994249502.exe&fallback_url=http://files.gooofull.com/resources/binaries/2015/.../36b65e49f3af992f3c6ab91994249502.exe  (7525db6e38fe5483a08e9f4b5dc6b626)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=e72GwfaxU/hirVXR5eHpkY4H5LucBCh sPH7fQsy0X0=&c=GxZVA INz6NMjKGCZWKSNXuVb2 csljgUHTRwAIfXUFk3VhDZJcqFceiviPxmWj5Y2iL6ZIFn1gJnm1NnVETk0DgJWXpR5SfrLKOQJSlbcj64PJDiRQi jYnRirmmfur&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (0db8446535f3f7102a122c9f2bd60c27)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=b8xzWzmjUxw2lvyaBHLihE5cidCHPI9cIXwkkfLdEPY=&c=3qCH6H9ppjoSJnRW/pW6U/4MYCtb7QE/7vJCkR5ojazUdO7WxJ9kzio1LoLrY9GlCyTd0bVySGgm2859OzQ1uLk47gKvPNG4iCEw0LcWDnMdMac63M3An8BQwnqnT1n0&fallback_url=http://res.prograbay.com/.../ChromeSetup_fr.exe  (81618c039e67f984bb9f62bf7ca751ab)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=m62Qv7STjnmrwsj41KAGGHntacjqBpMA6NBqCZih/lM=&c=76DTJpIYH5RZr7cNvX0/gDeQugJv1 mo35s04nv txrJ8T Sx/SMdMyCM71qFTny8gKrAENJzyOzW9jXaRlY2wThqE3RnbVQaJ1A012iY7WtbgGelASnyZZuWWa79/c8&fallback_url=http://res.mshist.com/.../ClashRoyale.exe  (9478adcd2900d24db5e5979a4b620beb)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=X/aW8jZ1IcT1r68fSoadq7meBYHZDf8534QobF7X0hk=&c=kDn52CtVZQZUM0LnkQxIIzoCU/yp2z9 8hqxHw0RYpmpSboBfgVd05bcL O9cYIgzdd/wIEeH8CugL7EDh40KpXe Z8qh1bfEjCdkpvO5NNfA2RJ8If 8dUojIjWmzkd&downloadAs=skype.exe&fallback_url=http://res.prograbay.com/.../SkypeSetupFull.msi  (c7f0344a83e470b0dbeea84544cb432e)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=ipG6 BGrjLF1nWiTPesbN1pxLTUxHpTweK4isLx5BVY=&c=Dm9QB62kNwSnFI95xUqTQkbJINQ40f0w3Vpv20zmzdCCiCYBQgQdUwuq6VeAha2JwXMlxrVeMzRBhcp9M2knACoALy XvFhuOCZCkjtz8QG6OZ2U5I0uavHjPT4gA84t&downloadAs=4a82f54da8772c30223e557fec88d8d0.exe&fallback_url=http://files.gooofull.com/resources/binaries/2015/.../4a82f54da8772c30223e557fec88d8d0.exe  (a9ffa13e4fb43038957ddebd11b93a9f)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=LSWNA6OEWcLkb62QYzbRMNgKtZObOHUXAaKWvNrncAE=&c= UZgN0Z PJglG/8ndXVKOG6HyQng 2bl9LmJ7zyQBVhYUxWfP/KmlXQ9tWW0CA2oPy4lgDPeO8QkePGtitttTl/6qMAVXW1Wb qonlg7nQG87rrTuE/tVfKJLq8 LQJy&fallback_url=http://res.mshist.com/.../Snapchat.exe  (c7e70c641bc6fe4b28b9af2d81eaf1e6)

1 / 68      (PUP)
http://www.hostgiftcontent.com/c?x=4kRaAMDw3h/wNNmB8ArW3nd3bS4ygje6zMC5IYFcJ8U=&c=TVULWN9jChWCG4kMz773 T53/QOYJix7yRFuLGxXs/T5 AP0maLtrHa/uoCrZZG9WKO4DTh54q9orm4sRc/u8qRw/xNwj0san6jA9vBfRK2NcHAXB FKR9lryTbVPw3J&fallback_url=http://res.setauls.com/.../Firefox_Setup_21.0_fr.exe  (cb191fa47a389adf56219b84e93d919d)

1 / 68      (PUP)
http://www.hostgiftcontent.com/WVl6OTRQVGRNYmxaQmNGbDZNVFpJU1daaU0xTTBiRGs1ZFZOS2VrbDVNelJCZFZvd2JuaHZiREpvVW1OTE1GRWxNMFFtWXoxa2JGWk9PWGxrYUVRM1VtWjBVbmt6VEdWaU4zcEVia2hCYzBkbWIwMVJORk5SWkRGdVptZDNaMHdsTWtKTVYyaHJiMk5YWkd4elUwTmtKVEpDVEVwWmNUVnBXVzVYV0VWUldXRjRUMlJ2YjNaMFRWUTFjRk5hT0VWNFNFTkRlRlpQTmtKQlFYb3pSVXBYWW5JbE1rWlFaVlp2YTFvNVpWQkpRelF3VW1admJuQkJUREZDWnlabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um5KbGN5NXdjbTluY21GaVlYa3VZMjl0SlRKR1kyaHliMjFsSlRKR1EyaHliMjFsVTJWMGRYQmZabkl1WlhobA==  (chromesetup_fr.exe)

The following 6 files have been seen to comunicate with www.hostgiftcontent.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.